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DETAILED ACTION 
Claim Status 

1 . Claims 1-26 are pending and have been examined. 

Claim Rejections - 35 USC § 112 

2. The following is a quotation of the first paragraph of 35 U.S.C. 1 12: 

The specification shall contain a written description of the invention, and of the manner 
and process of making and using it, in such full, clear, concise, and exact terms as to 
enable any person skilled in the art to which it pertains, or with which it is most nearly 
connected, to make and use the same and shall set forth the best mode contemplated by 
the inventor of carrying out his invention. 

3. Claims 1-26 are rejected under 35 U.S.C. 1 12, first paragraph, as failing to comply with 
the written description requirement. The claim(s) contains subject matter which was not 
described in the specification in such a way as to reasonably convey to one skilled in the relevant 
art that the inventor(s), at the time the application was filed, had possession of the claimed 
invention. Applicant's amended claims state "wherein said tag is not embedded in said database 
statement"; however there is no clear support fi-om the specifications of this specific limitation 
and is contradictory of what is stated in the specifications. The specification paragraph 0025 as 
published (US20050 187958) states the opposite of what is claimed, stating that the "tag 103b 
includes control information such as information related to priority, quality of service, user 
identification, security, and/or user supplied routines that is appended to, attached, sent with, 
embedded in, or otherwise associated with database statement 102a". 

4. The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 
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The specification shall conclude with one or more claims particularly pointing out and 
distinctly claiming the subject matter which the applicant regards as his invention. 

5. Prior 112 second paragraph rejection directed towards claims 1 and 14 are withdrawn. 

6. Claims 4-6, 17-18, and 26 all recites the limitation "the at least one parameter " in for 
example, line 2 of claim 4. There is insufficient antecedent basis for these limitations in the 
claim. 



Claim Rejections - 35 USC §101 
7. Regarding claims 14-26, these claims recite a "non-transitory machine-readable storage 
medium". In the absence of any other modifying disclosure of this limitation in the 
specification, the ' non-transitory machine-readable storage medium' is limited to statutory 
embodiments only such that it satisfies the terms of 35 U.S. C. 101. 



Claim Rejections - 35 USC § 102 
8. The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that form the 
basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 
122(b), by another filed in the United States before the invention by the applicant for 
patent or (2) a patent granted on an application for patent by another filed in the United 
States before the invention by the applicant for patent, except that an international 
application filed under the treaty defined in section 351(a) shall have the effects for 
purposes of this subsection of an application filed in the United States only if the 
international application designated the United States and was published under Article 
21(2) of such treaty in the English language. 
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9. Claims 1-4, 6-9, 14-21, and 26 are rejected under 35 U.S.C. 102(e) as being 
anticipated by U.S. 20050050046 by Puz et. al. (hereafter Puz). 

Claim 1 ; 

Puz discloses the following claimed limitations: 

"a database server receiving a request to execute the database statement, wherein the 
request includes the database statement and a tag that does not conform to a database language of 
said database statement, wherein said tag is not embedded in said database statement;"[See 
figure 2. Accordingly, a database server (figure 2, element 16) receiving a request (figure 2 
elements 34, 36, 38) to execute the database statement (figure 2 elements 40, 42, 44), wherein 
the request (figure 2 elements 34, 36, 38) includes the database statement (figure 2 elements 40, 
42, 44) and a tag (figure 2 elements 46, 48, 50) that does not conform to a database language of 
said database statement (figure 2, security markers not sql), wherein said tag (figure 2 element 
46, 48, and 50) is not embedded in said database statement (figure 2, SQL part and security 
marker)] 

"wherein said tag specifies at least one parameter field and at least one parameter 
value;"[figure 2 elements 46, 48, 50. Accordingly, wherein said tag (46, 48, 50) specifies at least 
one parameter field (marker 1, 2, 3) and at least one parameter value (employee_3, joumal l, 

none)] 

"in response to receiving the request, said database server storing information from the 
tag in a manner that is associated with said database statement and accessible to a tag 
access mechanism:"[figure 2 and figure 3. Accordingly, in response to receiving the request 
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(figure 2 elements 34, 36, 38), said database server (figure 2 element 16) storing information 
from the tag (figure 2 element 46, 48, 50) in a manner that is associated with said database 
statement (figure 2 element 40, 42, 44) and accessible to a tag access mechanism (0030, Access 
Control List checks)] 

"said database server executing said database statement, wherein during execution of said 
database statement said database server provides access to one or more of the at least one 
parameter value through said tag access mechanism provided by said database server."[figure 2 
and 4. Accordingly, said database server executing said database statement (figure 4 elements 
82-86), wherein during execution of said database statement (figure 4 elements 82-86) said 
database server (figure 2 element 16) provides access to one or more of the at least one 
parameter value (figure 4 element 82, a marker part to a server system for processing) through 
said tag access mechanism (figure 4 element 84, ACL checks on the markers) provided by said 
database server (figure 2 element 16)] 
Claim 2 ; 

Puz discloses "wherein the database statement is written in a language in which results desired 
are specified by the database statement, and no procedures for obtaining the results desired are 
specified by the database statement."[ Figure 2 and 0029-0030. Accordingly, wherein the 
database statement is written in a language in which results desired are specified by the database 
statement (SQL part), and no procedures (SQL part does not contain security marker) for 
obtaining the results desired are specified by the database statement (SQL part)] 
Claim 3 ; 
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Puz discloses "wherein a priority for executing the database statement is determined based on the 
at least one parameter value."[ Figure 2. 0027, proper access permissions. Accordingly, wherein 
a priority (proper access permissions) for executing the database statement (SQL) is determined 
based on the at least one parameter value (security marker)] 
Claim 4 : 

Puz discloses "wherein a security level is associated with the at least one parameter such that 
whether the database is entitled to access a component is based on the at least one parameter."[ 
Figure 2. 0027, proper access permissions. Accordingly, wherein a security level (proper 
access permissions) is associated with the at least one parameter (security marker) such that 
whether the database is entitled to access a component is based on the at least one parameter 
(access permissions)] 
Claim 6 ; 

Puz discloses "wherein the at least one parameter is related to user context information. "[figure 
2. 0027, user had proper access permission. Accordingly, wherein the at least one parameter 
(figure 2 element 46, 48, 50) is related to user context information (user had proper access 
permission)] 
Claim 7 : 

Puz discloses "wherein the tag comprises an indicator of a beginning of the tag, and an indicator 
of an end of the tag " [See figure 2 and figure 3. Accordingly, wherein the tag (figure 2 elements 
46, 48, 50) comprises an indicator of a beginning of the tag(figure 3, "(" ), and an indicator of an 
end of the tag (figure 3, ")" )] 
Claim 8 ; 
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Puz discloses "wherein the at least one parameter value is located between the indicator of the 
beginning and the indicator of the end of the tag."[ figure 3. Accordingly, wherein the at least 
one parameter value (figure 3 element 62, select ) is located between the indicator of the 
beginning (figure 3 element 62, "(") and the indicator of the end of the tag (figure 3 element 62 

")")] 

Claim 9 ; 

Puz discloses "wherein each of the at least one parameter fields comprises an indicator of a 
beginning of the parameter field, followed by the parameter value, which in turn is followed by 
an indicator of an end of the parameter field. "[ Figure 3. Accordingly, wherein each of the at 
least one parameter fields (figure 3 element 62, exists) comprises an indicator of a beginning of 
the parameter field (figure 3 element 62 "(" ), followed by the parameter value (figure 3 element 
62, select), which in turn is followed by an indicator of an end of the parameter field (figure 3 
element 62, ")").] 
Claim 14 ; 

Puz discloses the following claimed limitations: 

"a database server receiving a request to execute the database statement, wherein the 
request includes the database statement and a tag that does not conform to a database language of 
said database statement, wherein said tag is not embedded in said database statement;"[See 
figure 2. Accordingly, a database server (figure 2, element 16) receiving a request (figure 2 
elements 34, 36, 38) to execute the database statement (figure 2 elements 40, 42, 44), wherein 
the request (figure 2 elements 34, 36, 38) includes the database statement (figure 2 elements 40, 
42, 44) and a tag (figiire 2 elements 46, 48, 50) that does not conform to a database language of 
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said database statement (figure 2, security markers not sql), wherein said tag (figure 2 element 
46, 48, and 50) is not embedded in said database statement (figure 2, SQL part and security 
marker)] 

"wherein said tag specifies at least one parameter field and at least one parameter 

value;"[figure 2 elements 46, 48, 50. Accordingly, wherein said tag (46, 48, 50) specifies at least 
one parameter field (marker 1, 2, 3) and at least one parameter value (employee_3, joumal_l, 
none)] 

"in response to receiving the request, said database server storing information fi-om the 
tag in a manner that is associated with said database statement and accessible to a tag 
access mechanism: "[figure 2 and figure 3. Accordingly, in response to receiving the request 
(figure 2 elements 34, 36, 38), said database server (figure 2 element 16) storing information 
fi-om the tag (figure 2 element 46, 48, 50) in a manner that is associated with said database 
statement (figure 2 element 40, 42, 44) and accessible to a tag access mechanism (0030, Access 
Control List checks)] 

"said database server executing said database statement, wherein during execution of said 
database statement said database server provides access to one or more of the at least one 

parameter value through said tag access mechanism provided by said database server."[figure 2 
and 4. Accordingly, said database server executing said database statement (figure 4 elements 
82-86), wherein during execution of said database statement (figure 4 elements 82-86) said 
database server (figure 2 element 16) provides access to one or more of the at least one 
parameter value (figure 4 element 82, a marker part to a server system for processing) through 
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said tag access mechanism (figure 4 element 84, ACL checks on the markers) provided by said 
database server (figure 2 element 16)] 
Claim 15 ; 

Puz discloses "wherein the database statement is written in a language in which results desired 
are specified by the database statement, but no procedures for obtaining the results desired are 
specified by the database statement."[ Figure 2 and 0029-0030. Accordingly, wherein the 
database statement is written in a language in which results desired are specified by the database 
statement (SQL part), but no procedures (SQL part does not contain security marker) for 
obtaining the results desired are specified by the database statement (SQL part)] 
Claim 16 ; 

Puz discloses "wherein a priority for executing the database statement is determined based on the 
at least one parameter value."[ Figure 2. 0027, proper access permissions. Accordingly, wherein 
a priority (proper access permissions) for executing the database statement (SQL) is determined 
based on the at least one parameter value (seciirity marker)] 
Claim 18 ; 

Puz discloses "wherein the at least one parameter is related to user context information."[figure 
2. 0027, user had proper access permission. Accordingly, wherein the at least one parameter 
(figure 2 element 46, 48, 50) is related to user context information (user had proper access 
permission)] 
Claim 19 ; 

Puz discloses "wherein the tag comprises an indicator of a beginning of the tag, and an indicator 
of an end of the tag " [See figure 2 and figure 3. Accordingly, wherein the tag (figure 2 elements 
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46, 48, 50) comprises an indicator of a beginning of the tag(figure 3, "(" ), and an indicator of an 
end of the tag (figure 3, ")" )] 
Claim 20 ; 

Puz discloses "wherein the at least one parameter value is located between the indicator of the 

beginning and the indicator of the end of the tag."[ figure 3. Accordingly, wherein the at least 
one parameter value (figure 3 element 62, select ) is located between the indicator of the 
beginning (figure 3 element 62, "(") and the indicator of the end of the tag (figure 3 element 62 
")")] 

Claim 21 : 

Puz discloses "wherein each of the at least one parameter fields comprises an indicator of a 
beginning of the parameter field, followed by the parameter value, which in turn is followed by 
an indicator of an end of the parameter field."[ Figure 3. Accordingly, wherein each of the at 
least one parameter fields (figure 3 element 62, exists) comprises an indicator of a beginning of 
the parameter field (figure 3 element 62 "(" ), followed by the parameter value (figure 3 element 
62, select), which in turn is followed by an indicator of an end of the parameter field (figure 3 
element 62, ")").] 
Claim 26 : 

Puz discloses "wherein a security level is associated with the at least one parameter such 
that whether the database is entitled to access a component is based on the at least one 
parameter."[ Figure 2. 0027, proper access permissions. Accordingly, wherein a security level 
(proper access permissions) is associated with the at least one parameter (security marker) such 
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that whether the database is entitled to access a component is based on the at least one parameter 
(access permissions)] 

Claim Rejections - 35 USC § 103 

10. The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the subject 
matter sought to be patented and the prior art are such that the subject matter as a whole 
would have been obvious at the time the invention was made to a person having ordinary 
skill in the art to which said subject matter pertains. Patentability shall not be negatived 
by the manner in which the invention was made. 

11. Claims 5, 11-13, and 22-25 rejected under 35 U.S.C. 103(a) as being unpatentable 
over U.S. 20050050046 by Puz et. al. (hereafter Puz) further in view of U.S. Patent 
Application Publication 20030014394 by Fujiwara et. al. (hereafter Fujiwara). 

Claim 5 ; 

Puz does not explicitly disclose "wherein the at least one parameter is accessible to a systems 
administrator" On the other hand, Fujiwara fiirther discloses "wherein the at least one parameter 
is accessible to a systems administrator, "[figure 8 and 0044, administrator]. Both Puz and 
Fujiwara are within the same field of endeavor as they are both access control systems for a 
database query. It would have been obvious to a person of an ordinary skill at the time the 
invention was made to have applied Fujiwara' s disclosure above to the disclosure of Puz for the 
purpose of allowing an access policy to be determined in order to provide for easier management 
of access control to each user. 
Claim 10 ; 
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Puz does not explicitly disclose "wherein the at least one parameter value can be accessed 
without accessing memory allocated to a database session, wherein the database statement was 
issued within the database session". On the other hand, Fujiwara further discloses "wherein the 
at least one parameter value can be accessed without accessing memory allocated to a database 
session, wherein the database statement was issued within the database session"[figure 12. 
Accordingly, wherein the at least one parameter value (figure 12 element 1202, c.pt_ID, i.vst) 
can be accessed without accessing a session space (figure 12 element 1224, filter MDQ) 
associated with a session window (figure 12 element 702), wherein the database statement 
(figure 12 element 1202) was issued within the session window (figure 12 element 702)]. Both 
Puz and Fujiwara are within the same field of endeavor as they are both access control systems 
for a database query. It would have been obvious to a person of an ordinary skill at the time the 
invention was made to have applied Fujiwara' s disclosure above to the disclosure of Puz for the 
purpose of allowing an access policy to be determined in order to provide for easier management 
of access control to each user. 
Claim 11 ; 

Puz does not explicitly disclose "wherein the at least one parameter value can be accessed 
without accessing memory allocated to a database session, wherein the database statement was 
issued within the database session." On the other hand, Fujiwara further discloses "wherein the 
at least one parameter value can be accessed without accessing memory allocated to a database 
session, wherein the database statement was issued within the database session." [figure 12. 
Accordingly, wherein the at least one parameter value (Figure 12 element 1202, example.. 
c.PT ID, i.VST) can be accessed (Figure 12, element 1202, Issue SQL query) without accessing 
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memory allocated to a database session (figure 12 element 702), wherein the database statement 
was issued (figure 12 element 734, issued SQL query)within the database session (Figure 12 
element 734, Report templates)] Both Puz and Fujiwara are within the same field of endeavor as 
they are both access control systems for a database query. It would have been obvious to a 
person of an ordinary skill at the time the invention was made to have applied Fujiwara 's 
disclosure above to the disclosure of Puz for the purpose of allowing an access policy to be 
determined in order to provide for easier management of access control to each user. 
Claim 12 ; 

Puz does not explicitly disclose "wherein the at least one parameter value can be accessed 
without accessing memory allocated to a database session, wherein the database statement was 
issued within the database session.". On the other hand, Fujiwara fiirther discloses "wherein the 
at least one parameter value can be accessed without accessing memory allocated to a database 
session, wherein the database statement was issued within the database session." [figure 12. 
Accordingly, wherein the at least one parameter value (Figure 12 element 1202, example.. 
c.PT ID, i.VST) can be accessed (Figure 12, element 1202, Issue SQL query) without accessing 
memory allocated to a database session (figure 12 element 702), wherein the database statement 
was issued (figure 12 element 734, issued SQL query)within the database session (Figure 12 
element 734, Report templates)] Both Puz and Fujiwara are within the same field of endeavor as 
they are both access control systems for a database query. It would have been obvious to a 
person of an ordinary skill at the time the invention was made to have applied Fujiwara 's 
disclosure above to the disclosure of Puz for the purpose of allowing an access policy to be 
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determined in order to provide for easier management of access control to eacti user. 
Claim 13 : 

Puz does not explicitly disclose "wherein the at least one parameter value can be accessed after a 
session window has closed, wherein the database statement was issued within the session 
window." On the other hand, Fujiwara further discloses "wherein the at least one parameter 
value can be accessed after a session window has closed, wherein the database statement was 
issued within the session window." [figure 12. Accordingly, wherein the at least one parameter 
value can be accessed (figure 12 element 1202, c.PT ID, i.VST) after a session window has 
closed (figure 12 element 734), wherein the database statement was issued within the session 
window (figure 12 element 734 and 1202)] Both Puz and Fujiwara are within the same field of 
endeavor as they are both access control systems for a database query. It would have been 
obvious to a person of an ordinary skill at the time the invention was made to have applied 
Fujiwara's disclosure above to the disclosure of Puz for the purpose of allowing an access policy 
to be determined in order to provide for easier management of access control to each user. 
Claim 17 ; 

Puz does not explicitly disclose "wherein the at least one parameter is accessible to a systems 
administrator" On the other hand, Fujiwara further discloses "wherein the at least one parameter 
is accessible to a systems administrator, "[figure 8 and 0044, administrator]. Both Puz and 
Fujiwara are within the same field of endeavor as they are both access control systems for a 
database query. It would have been obvious to a person of an ordinary skill at the time the 
invention was made to have applied Fujiwara's disclosure above to the disclosure of Puz for the 
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purpose of allowing an access policy to be determined in order to provide for easier management 
of access control to each user. 
Claim 22 ; 

Puz does not explicitly disclose "wherein the at least one parameter value can be accessed 
without accessing memory allocated to a database session, wherein the database statement was 
issued within the database session". On the other hand, Fujiwara further discloses "wherein the 
at least one parameter value can be accessed without accessing memory allocated to a database 
session, wherein the database statement was issued within the database session"[figure 12. 
Accordingly, wherein the at least one parameter value (figure 12 element 1202, c.pt_ID, i.vst) 
can be accessed without accessing a session space (figure 12 element 1224, filter MD()) 
associated with a session window (figure 12 element 702), wherein the database statement 
(figure 12 element 1202) was issued within the session window (figure 12 element 702)]. Both 
Puz and Fujiwara are within the same field of endeavor as they are both access control systems 
for a database query. It would have been obvious to a person of an ordinary skill at the time the 
invention was made to have applied Fujiwara' s disclosure above to the disclosure of Puz for the 
purpose of allowing an access policy to be determined in order to provide for easier management 
of access control to each user. 
Claim 23 ; 

Puz does not explicitly disclose "wherein the at least one parameter value can be accessed 
without accessing memory allocated to a database session, wherein the database statement was 
issued within the database session." On the other hand, Fujiwara further discloses "wherein the 
at least one parameter value can be accessed without accessing memory allocated to a database 
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session, wherein the database statement was issued within the database session." [figure 12. 
Accordingly, wherein the at least one parameter value (Figure 12 element 1202, example.. 
c.PT ID, i.VST) can be accessed (Figure 12, element 1202, Issue SQL query) without accessing 
memory allocated to a database session (figure 12 element 702), wherein the database statement 
was issued (figure 12 element 734, issued SQL query)within the database session (Figure 12 
element 734, Report templates)] Both Puz and Fujiwara are within the same field of endeavor as 
they are both access control systems for a database query. It would have been obvious to a 
person of an ordinary skill at the time the invention was made to have applied Fujiwara 's 
disclosure above to the disclosure of Puz for the purpose of allowing an access policy to be 
determined in order to provide for easier management of access control to each user. 
Claim 24 ; 

Puz does not explicitly disclose "wherein the at least one parameter value can be accessed 
without accessing memory allocated to a database session, wherein the database statement was 
issued within the database session.". On the other hand, Fujiwara further discloses "wherein the 
at least one parameter value can be accessed without accessing memory allocated to a database 
session, wherein the database statement was issued within the database session." [figure 12. 
Accordingly, wherein the at least one parameter value (Figure 12 element 1202, example.. 
c.PT ID, i.VST) can be accessed (Figure 12, element 1202, Issue SQL query) without accessing 
memory allocated to a database session (figure 12 element 702), wherein the database statement 
was issued (figure 12 element 734, issued SQL query)within the database session (Figure 12 
element 734, Report templates)] Both Puz and Fujiwara are within the same field of endeavor as 
they are both access control systems for a database query. It would have been obvious to a 
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person of an ordinary skill at the time the invention was made to have applied Fujiwara's 
disclosure above to the disclosure of Puz for the purpose of allowing an access policy to be 
determined in order to provide for easier management of access control to each user. 
Claim 25 ; 

Puz does not explicitly disclose "wherein the at least one parameter value can be accessed after a 
session window has closed, wherein the database statement was issued within the session 
window." On the other hand, Fujiwara fiirther discloses "wherein the at least one parameter 
value can be accessed after a session window has closed, wherein the database statement was 
issued within the session window." [figure 12. Accordingly, wherein the at least one parameter 
value can be accessed (figure 12 element 1202, c.PT_ID, i.VST) after a session window has 
closed (figure 12 element 734), wherein the database statement was issued within the session 
window (figure 12 element 734 and 1202)] Both Puz and Fujiwara are within the same field of 
endeavor as they are both access control systems for a database query. It would have been 
obvious to a person of an ordinary skill at the time the invention was made to have applied 
Fujiwara's disclosure above to the disclosure of Puz for the purpose of allowing an access policy 
to be determined in order to provide for easier management of access control to each user. 

Response to Arguments 

12. Applicant's arguments with respect to claims 1-26 have been considered but are moot in 
view of the new ground(s) of rejection. 
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Conclusion 

13. The prior art made of record listed on pto-892 and not relied, if any, upon is considered 
pertinent to applicant's disclosure. 

14. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Contact Information 

15. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to MICHAEL PHAM whose telephone number is (571)272-3924. 
The examiner can normally be reached on 9am-5pm. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, John Cottingham can be reached on 571-272-7079. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an appUcation may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/M. P./ /John R. Cottingham/ 

Examiner, Art Unit 2 1 67 Supervisory Patent Examiner, Art Unit 
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